Added a .platform.app.yaml with the default whitelist.